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LISTING OF THE CLAIMS 

1 . (Previously presented) A system for configuring differentiated services (Diffserv) over 
multi-protocol label switching (MPLS) in a network that includes MPLS tunnels, comprising: 

a policy server that is arranged to configure a customer policy and a mapping policy that 
maps between an experimental (EXP) field and a unique per-hop-behavior (PHB), and to deploy the 
mapping policy and the customer policy to interfaces of devices of the network that correspond to 
the tunnels, wherein the interfaces and the customer policy are associated with a same role name. 

2. (Original) The system of claim 1 , wherein 

the customer policy comprises a tunnel group identifier and tunneling mode. 

3. (Original) The system of claim 1, wherein 

the policy server translates the mapping policy into device specific commands, and 
deployment is performed by deploying commands to specific devices. 

4. (Original) The system of claim 1, wherein 

deployment is such that the interfaces associate with at least one of input roles, output roles 
and MPLS gateways of customer source and destination host groups. 

5. (Previously Presented) An apparatus for configuring Diffserv over MPLS in a network, 
comprising: 

a memory; 

a service application residing on the memory, 
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wherein the service application is arranged to configure a customer policy that 
comprises a tunnel group and tunneling mode, the customer policy being arranged to have 
customer traffic mapped into MPLS tunnels, and 

wherein the service application is arranged to configure an EXP-to-PHB mapping 
policy that is arranged to map EXP fields to PHB; 

a central processing facility that is arranged to translate the customer policy and mapping policy 
into device-neutral policy parameters; and 

a policy consumer that is arranged to translate the device-neutral policy parameters into 
device-specific commands, and that is further arranged to deploy the device-specific commands to 
policy targets, such that the customer policy and mapping policy are implemented across at least a 
portion of the network, and wherein the policy targets comprise network devices that each include 
an interface associated with a role name that is also associated with the customer policy. 

6. (Original) The apparatus of claim 5, further comprising: 

a user interface that is arranged to receive the customer policy and the mapping policy. 

7. (Original) The apparatus of claim 5, wherein 

deployment is such that the interfaces associate with at least one of input roles, output roles 
and MPLS gateways of customer source and destination host groups. 

8. (Original) The apparatus of claim 5, wherein 

the policy consumer is further arranged to attach the customer policy to the corresponding 
MPLS tunnels and deploy the customer policy to interfaces of the attached MPLS tunnels. 
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9. (Original) The apparatus of claim 5, further comprising: 

a database for storing the device-neutral policy parameters. 

10. (Original) The apparatus of claim 5, wherein 

the service application comprises a tunnel group object that is arranged to create the MPLS 
tunnels by specifying end-point routers and inter-connecting topology. 

1 1 . (Previously presented) An apparatus for configuring Diffserv over MPLS in a network, 
comprising: 

a means for defining a mapping policy that maps between an EXP field and a unique PHB; 
a means for maintaining a customer policy; 

a means for translating the mapping policy and customer policy into device-specific 
commands; and 

a means for deploying the device-specific commands to policy targets, wherein each policy 
target comprises a network device that includes an interface that is associated with a role name that 
is also associated with the customer policy. 

12. (Original) The apparatus of claim 11, wherein 

the customer policy includes information about a tunnel group identifier and a tunnel mode. 

13. (Original) The apparatus of claim 1 1 , wherein 

deployment is such that the interfaces associate with at least one of input roles, output roles 
and MPLS gateways of customer source and destination host groups. 
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1 4. (Previously presented) An article comprising: a storage medium, the storage medium having 
instructions stored thereon, wherein when the instructions are executed by at least one device, they 
result in: 

defining a mapping policy configured to map between an EXP field and a unique PHB; 
defining a customer policy that is configured to govern the treatment of individual customer 

traffic; 

defining a network policy that is configured to define the Diffserv treatment of aggregated 

traffic; 

translating the mapping policy, the network policy and the customer policy into device- 
specific commands; and 

deploying the device-specific commands to policy targets, wherein each policy target 
comprises a network device that includes an interface assigned a role name associated with the 
customer policy. 

15. (Original) The article of claim 1 4, wherein executing the instructions further results in: 
generating device neutral information associated with the mapping policy, the network 

policy and the customer policy. 

16. (Original) The article of claim 1 5, wherein 

the device specific commands are generated from the device neutral information. 

1 7. (Original) The article of claim 1 5, wherein executing the instructions further results in: 
storing the device neutral information in a database. 
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1 8. (Original) The article of claim 14, wherein 

deployment is such that the interfaces associate with at least one of input roles, output roles 
and MPLS gateways of customer source and destination host groups. 

19. (Original) The article of claim 14, wherein 

deploying the mapping policy to the network interfaces further comprises issuing new 
commands to reconfigure a router based on the mapping policy. 

20. (Original) The article of claim 14, wherein 

the customer policy includes information about a tunnel group identifier and a tunnel mode. 

21 . (Previously presented) A method for configuring Diffserv over MPLS in a network, 
comprising: 

defining a mapping policy configured to map between an EXP field and a unique PHB; 
defining a customer policy that is configured to govern the treatment of individual customer 

traffic; 

defining a network policy that is configured to define the Diffserv treatment of aggregated 

traffic; 

translating the mapping policy, the network policy and the customer policy into device- 
specific commands; and 

deploying the device-specific commands to policy targets, wherein each policy target 
comprise a network device that includes an interface assigned a role name associated with the 
customer policy. 
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22. (Original) The method of claim 21, further comprising: 

generating device neutral information associated with the mapping policy, the network 
policy and the customer policy. 

23. (Original) The method of claim 22, wherein 

the device specific commands are generated from the device neutral information. 

24. (Original) The method of claim 22, further comprising: 
storing the device neutral information in a database. 

25. (Previously presented) The method of claim 21, wherein 

deployment is such that the network interfaces of the policy targets associate with at least 
one of input roles, output roles and MPLS gateways of customer source and destination host groups. 

26. (Previously presented) The method of claim 21, wherein 

deploying device-specific commands associated with the mapping policy to the network 
interfaces of the policy targets further comprises issuing new commands to reconfigure a router 
based on the mapping policy. 

27. (Original) The method of claim 21 wherein 

the customer policy includes information about a tunnel group identifier and a tunnel 
mode. 
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